- Shipped
- August 28, 2026 at 5:45 AM UTC
- Author
- Kamo
- Commit
- 11c7c5c
A holder of MANAGE_SYSTEM_BUGS gets a SEND TO AI switch on the Report Bug window, and submitting with it on hands the report to a session without the triage dialog in between. The new endpoint takes NO BODY, and that is the point. The form has no prompt box, no model picker and no screenshot picker, so the instruction, the model, the effort, the screenshots and the status are every one of them chosen here — a caller past the gate cannot express anything the dialog could not, which makes the switch strictly narrower than the surface it stands in for. It then goes through dispatch() unchanged, so the throttle, the audit row written before the network call, and the screenshot ownership check are the same ones, not a second copy to keep in step. Guarded by the class-level **************** the dialog already sits under. The console hides the switch from everybody else, but that is chrome: a report submitted with the flag by a member without the right is refused with a 403 here and reaches no session. "Already viewed" is a per-member fact and cannot be written for everyone — PlatformRightsResolver answers "does this member hold it", never "who holds it". So the read is recorded for the operator who asked for the dispatch, before the network call rather than after it (it can take two minutes and it can fail), and IN_PROGRESS is what takes the report off every other manager's NEW badge.